$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e01a9d2-46b7-36e2-a080-c427b9dd409f.roa File: 2e01a9d2-46b7-36e2-a080-c427b9dd409f.roa (raw, json) Hash identifier: DP3s1B+JO2vJ0l7ClVU8M+7JWCoaBUvzN/50NVYSL+4= Subject key identifier: 69:1A:6F:99:22:81:73:D3:AE:00:C5:4A:8A:CD:0A:B3:51:B7:41:73 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFF24F9EE785BC7A27700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e01a9d2-46b7-36e2-a080-c427b9dd409f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ff:24:f9:ee:78:5b:c7:a2:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f55c7145-e687-4766-8673-a99b3a390224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:f3:04:a3:ca:b4:42:68:a7:3c:1e:d6:7c: dc:08:6a:00:c9:65:38:bd:9a:ee:de:59:7b:d4:f6: d5:a5:ec:e3:1b:ff:f7:79:7a:a7:83:99:35:5b:5c: 4d:24:8d:23:56:62:00:73:f0:54:29:8b:ff:c5:3b: d5:d1:38:8e:aa:af:71:18:b7:0e:78:02:6c:2c:c0: d4:ea:0f:6d:02:22:b6:26:b3:ab:ee:15:65:70:6a: d5:20:31:f6:b0:ad:ac:16:f3:89:7a:a8:53:2d:e0: 20:90:c9:5c:a5:06:f5:65:34:b4:33:bb:b7:78:61: 1a:53:64:f2:87:9d:d7:e2:89:c8:f7:de:09:20:52: 98:7f:e8:d3:be:0e:51:81:5a:15:ee:68:cd:dd:30: 6a:0d:52:63:6c:81:87:3b:91:48:7e:3e:36:a6:f4: 3c:97:54:e2:8b:34:70:7c:0c:12:d0:7a:3b:3b:36: 0a:53:fa:2b:c9:93:67:ab:4e:46:dd:e9:5f:cc:08: 38:61:d0:3c:0a:00:60:a2:9d:ee:99:15:7b:41:35: dd:8c:62:95:f9:48:2a:2c:76:8a:e5:dd:9c:e5:f6: 21:a6:1d:2a:13:d6:70:c0:66:18:48:2c:6a:26:4a: 85:c6:a4:20:91:0a:dc:45:95:d6:c7:06:15:e8:13: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:6F:99:22:81:73:D3:AE:00:C5:4A:8A:CD:0A:B3:51:B7:41:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e01a9d2-46b7-36e2-a080-c427b9dd409f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:68:0c:50:86:c4:85:41:bc:f1:9d:9f:0c:ff:f3:7a:dc:53: 13:cb:70:eb:de:d1:d5:5d:bc:94:d6:57:00:31:8d:7d:75:d6: 70:2d:ef:9e:f1:fd:a1:de:49:26:4c:f2:9e:86:f9:0a:bb:d6: b7:56:9d:ed:ed:70:ba:c6:02:92:69:3e:57:a7:52:04:f1:5b: 3a:97:6f:d8:5c:01:72:e1:3f:6a:1b:a4:f4:60:22:bf:16:ef: 99:9a:19:c1:65:48:07:65:0c:ca:01:11:41:90:ff:74:02:46: 77:f9:5e:45:ad:cc:bb:04:c7:23:7b:4b:5a:40:41:ae:31:f2: 7d:0e:1d:69:89:e8:91:69:47:05:b7:b0:9d:c2:fb:8a:a8:e0: 0e:f8:d5:16:c8:33:db:56:2c:d5:8c:0c:68:96:92:22:fc:46: 87:de:fd:73:9e:e7:94:5f:1f:bf:fb:8d:b7:04:97:70:a8:59: b8:b9:a8:d5:29:3a:f8:eb:dc:b7:14:62:5d:ba:ec:a7:7e:71: d4:b0:54:4f:be:46:81:e4:79:54:4b:f8:3b:04:21:74:c1:3b: aa:c6:31:f6:c5:44:50:6e:f7:8a:e2:5e:b2:c2:98:76:d2:85: c9:c5:7c:70:3a:b6:d2:fd:b6:1f:cf:78:87:95:17:dd:04:60: a2:5e:67:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/8k+e54W8eidwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjU1YzcxNDUtZTY4Ny00NzY2LTg2NzMtYTk5YjNhMzkwMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuPzBKPKtEJopzwe1nzcCGoAyWU4vZru3ll7 1PbVpezjG//3eXqng5k1W1xNJI0jVmIAc/BUKYv/xTvV0TiOqq9xGLcOeAJsLMDU 6g9tAiK2JrOr7hVlcGrVIDH2sK2sFvOJeqhTLeAgkMlcpQb1ZTS0M7u3eGEaU2Ty h53X4onI994JIFKYf+jTvg5RgVoV7mjN3TBqDVJjbIGHO5FIfj42pvQ8l1TiizRw fAwS0Ho7OzYKU/oryZNnq05G3elfzAg4YdA8CgBgop3umRV7QTXdjGKV+UgqLHaK 5d2c5fYhph0qE9ZwwGYYSCxqJkqFxqQgkQrcRZXWxwYV6BOMEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkab5kigXPTrgDFSorNCrNRt0FzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmUwMWE5ZDItNDZiNy0z NmUyLWEwODAtYzQyN2I5ZGQ0MDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJoDFCGxIVBvPGdnwz/83rcUxPLcOve0dVdvJTWVwAxjX111nAt757x /aHeSSZM8p6G+Qq71rdWne3tcLrGApJpPlenUgTxWzqXb9hcAXLhP2obpPRgIr8W 75maGcFlSAdlDMoBEUGQ/3QCRnf5XkWtzLsExyN7S1pAQa4x8n0OHWmJ6JFpRwW3 sJ3C+4qo4A741RbIM9tWLNWMDGiWkiL8Rofe/XOe55RfH7/7jbcEl3CoWbi5qNUp Ovjr3LcUYl267Kd+cdSwVE++RoHkeVRL+DsEIXTBO6rGMfbFRFBu94riXrLCmHbS hcnFfHA6ttL9th/PeIeVF90EYKJeZ80= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:48 2026 by rpki-client